Army Implements New Monitoring Strategies to Mitigate Insider Threats

FORT BELVOIR, Va. – The Army is developing new User Activity Monitoring (UAM) capabilities to protect the enterprise network and assist with the establishment of the Army’s Insider Threat program. The program was established to protect Army personnel, information, and resources by deterring, detecting, and mitigating posed insider threats that are malicious and/or unintentional. UAM is a software-based, scalable solution that proactively identifies internal risks associated with the theft or misuse of critical, mission-essential data.

The UAM solution is being developed under the Army’s Product Manager (PdM) Cyber Analytics and Detection (CAD), a product office within the Project Manager Defensive Cyber Operations (DCO) portfolio. PdM CAD is responsible for delivering cyber analytics and detection solutions to the Army Cyber Command (ARCYBER). While the Army is always focused on defending against attacks from the outside, it must also focus on preventing internal breaches of security or policy violations.

Data breaches or suspicious user activity can compromise security across the network. Therefore, it’s imperative to have the necessary tools to help protect the network, according to Maj. Peter Amara, Assistant PdM CAD.

“This capability will give us the tools to remediate threats and prevent operational downtime by enabling us to investigate the root cause of an incident and provide traceability to a suspected user,” said Amara.

PdM CAD’s UAM prototype solution is being developed through an industry partnership with the Consortium for Command, Control, and Communications in Cyberspace (C5). Phase one of the prototype capability will be delivered to Army Cyber Command in the spring of 2019.

PdM CAD and PM DCO are organizations within Program Executive Office Enterprise Information Systems (PEO EIS). PEO EIS is responsible for managing and providing the information technology network and business systems that Soldiers and the U.S. Army need to operate every day. With a diverse portfolio of 37 program offices and 71 acquisition programs, PEO EIS supports and fields Army and DOD communications, logistics, medical, finance, personnel, training and procurement systems for all ten combatant commands. PEO EIS rapidly delivers innovative and cost-effective systems and services for the Total Force to globally connect the Army and provide a decisive information advantage to every Soldier.

Connecting the Army. Working for Soldiers.

###